Page generated: 09 Nov 2026, 09:51 UTC
← Dashboard

CVE-2026-19490

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

CVSS 9.3 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.6/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 9.3: +1.40
  • Fresh EPSS: 32.65%: +0.16

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 26 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

Cyber Kendra
Press · 27 Sep 2026, 07:00 · Unpatched NetScaler Zero-Days Exploited, watchTowr Says - Cyber Kendra
The Hacker News
Press · 27 Sep 2026, 07:00 · Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation - The Hacker News
watchTowr
Press · 27 Sep 2026, 07:00 · Citrix NetScaler Zero-Day RCE FAQ: CVE-2026-88771 and CVE-2026-88772 - watchTowr
https://tech-insider.org/
Press · 17 Sep 2026, 07:00 · Citrix NetScaler CVE-2026-19490 Hits CISA KEV List - https://tech-insider.org/
Rescana
Press · 14 Sep 2026, 07:00 · Active Exploitation Alert: Citrix NetScaler ADC/Gateway Authentication Bypass (CVE-2026-19490) Added to CISA KEV — Patch and Forensic Triage Guidance - Rescana
See all 26 source documents
Hacker News
Press · 14 Sep 2026, 03:45 · Detecting and Weaponizing NetScaler
Recorded Future
Press · 13 Sep 2026, 07:00 · September 2026 CVE Landscape - Recorded Future
Resecurity
Press · 11 Sep 2026, 07:00 · CISA KEV Alert: Cisco, Citrix, and Fortinet Vulnerabilities Under Active Exploitation - Resecurity
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 10 Sep 2026, 07:00 · Citrix Products Multiple Vulnerabilities - Hong Kong Computer Emergency Response Team Coordination Centre
The Hacker News
Press · 10 Sep 2026, 07:00 · CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline - The Hacker News
SecurityWeek
Press · 10 Sep 2026, 07:00 · Critical NetScaler Vulnerability Exploited in Attacks - SecurityWeek
CyberSecurityNews
Press · 10 Sep 2026, 07:00 · CISA Warns of Citrix NetScaler Authentication Bypass Vulnerability Exploited in Attacks - CyberSecurityNews
Techzine Global
Press · 07 Sep 2026, 07:00 · Citrix urges prompt NetScaler update - Techzine Global
Australian Cyber Security Magazine
Press · 04 Sep 2026, 07:00 · ACSC warns of critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway - Australian Cyber Security Magazine
BleepingComputer
Press · 04 Sep 2026, 07:00 · Critical Citrix NetScaler auth bypass now leveraged in attacks - BleepingComputer
Field Effect
Press · 04 Sep 2026, 07:00 · Early exploitation of Citrix NetScaler authentication bypass vulnerability - Field Effect
Cyber Daily
Press · 24 Aug 2026, 07:00 · Patch now! Experts urge priority patching of latest Citrix NetScaler ADC and NetScaler Gateway vulnerability - Cyber Daily
SOCRadar
Press · 24 Aug 2026, 07:00 · CVE-2026-19490: NetScaler Auth Bypass Patched - SOCRadar
Help Net Security
Press · 21 Aug 2026, 07:00 · Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490) - Help Net Security
BleepingComputer
Press · 20 Aug 2026, 07:00 · Citrix urges admins to patch new NetScaler flaws as soon as possible - BleepingComputer
SecurityWeek
Press · 20 Aug 2026, 07:00 · Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler - SecurityWeek
The Hacker News
Press · 20 Aug 2026, 07:00 · Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers - The Hacker News
SOC Prime
Press · 20 Aug 2026, 07:00 · CVE-2026-19490: Critical Citrix NetScaler Flaw - SOC Prime
Cyber Press
Press · 20 Aug 2026, 07:00 · Critical Citrix NetScaler Authentication Bypass Flaw Exposes Gateway Appliances - Cyber Press
Rapid7
Press · 19 Aug 2026, 07:00 · CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway - Rapid7
CyberSecurityNews
Press · 19 Aug 2026, 07:00 · Critical Citrix NetScaler Flaw Lets Remote Attackers Bypass Authentication Without Credentials - CyberSecurityNews

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.6 (2026-11-02 15:14). The curve appears once the score changes.

Public exploit evidence

1

Public exploit entries / repo candidates

See 1 repos with metrics
RepositoryStarsForksLanguageUpdated
TarPeg007/CVE-2026-19490195Python02 Sep 2026, 15:44
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 9.3; EPSS 32.7%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 14:00:00.097835+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
First press mention
19 Aug 2026, 07:00
Published
19 Aug 2026, 12:54
Added to the CISA KEV catalog
09 Sep 2026, 00:00
Latest press mention
27 Sep 2026, 07:00
Score calculated
05 Nov 2026, 14:00
PoCs on GitHub
1 repositories